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Division Privacy Officer 



foognon Division: 



kg; cause; 

Date signed 

Name: 
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• s , C l ? ' 4 

*w-l ~1 

I Pie: Special A.oosant to the AIAa 

FBI HQ Division; Lab 



bsvesure 


Date v.igneH; bH4V,| #-f 


Dam signed: 


Marne; D. CfoYksaa Hanvef; 


A.ante; 


Tide: Assistant Director 


T :0c 


After fo drvfofos approvals, fewarf signed Farsi copy j>ft» * F . t <>«< ' copy n FBI O-OC/POJI I.IFil food). 

(The FBI Privacy a: A Civil L-berRes Oftkefs determinations. condition*. smd/or fmol approve; end be. recorded or? the 
;oik>'v;s;p page.) 


Upon final FBI approval FBI OGCYCLU will mG.rlb.nc as follow: 

1 • Signed original to He IPtFHQ-C 1321 Bb (fod to .IEH 1B204 vie PA-520} 

Copies (rvsdpieoG please print/reprodkiee as needed for PsognoovDsvision fiie{s;). 
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p N* I \>Mi II 0 OS Fit I \! I M OM V} 
FBI PTA; AS€L1>-€V Daiabas* 

nwi \w u^nujiniHMis\uov u'Vjiiiosk 


PbVtoported: _x_No .Ye.-o SOR.N/SORN revhioo tiopisrod: .< No 

System py-nmas to Laboratory employees eoly 
and inform ,s?;m; b avmbhle m other FBI sy beam 




















jlJNCLASS? FS FO/OFFIOAl l SJA ONLY; 

FBI VTA: ASCLD-CY diabase 

L INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a general description of fin 1 system or project that »d»des; mme of the sy stem/p reject, 
including associated ammyrns; sfr»«rt«r* of ike system/project, purpose; mtare of the mfurmuthm 
m tiie system and how it will fee used; who will have «««to the information m the system and the 
manner of trms mission to al users. 

The proposed Microsoft Access database will allow Lab Division employees to store and maintain 
individual accreditation mlbnoatiow examiner qualification udonnahow and human resources type data 
in one system. The database will produce American Society of Crime Laboratory Directors (ASCII)) 

x " v C " C ~' v v ~~ o ^ \ - v v\ ■* v ' V ** ' 

w eum'W.v "slv"". mor o' 4< meed w t'v dot,thaw mclode-. cmohy.ee norm w> A .kEN-w ewphw.v 
number, telephone numbers (work. home, cad, blackberry), entail address. ASCII) discipline types, 
laboratory assignment, position number, job title, examination typc/servke, court testimony (dates, exam, 
type/service, S of tests mom es), previous work experience, education (Institution, degree, major), training, 
foreign languages., professional organisations, publications, and research. Employees will only have 
access to their own information while management Will have access to all employee records. 

2 Does the system.pixyect collect, maintain, or disseminate any intbrma^bMrout individuals in 
identifiable form, i.e., is information linked to or linkable to specific individuals (which Is the definition 
of personally identifiable mlhrmation (PilfC 

NO |lf no, STOP. The FT A is now complete and after division approval(s) should be 
submitted fa FBI OGCl/HILU for final FBI approval. Unless yon arc otherwise advised, no 
FI A is required.] 

s.YET. [if yes, please continued 

3. Does the systenvproicct pertain only to government employees, contractors, or consultants? 

__ NO. .x YEN, 

4. is information about United States citixeux or lawfully admitted permanent resident aliens retrieved 
o" S o „, s „v " umw oj >. w w '■o , "l dot m ! 

NO. _x.YES. 

5 Ate Social Security Numbers (SSNs) collected, mauuamed or disseminated from the system/pro]act? 
x NO, YES. If yes, check all that apply: 

SNNs.iu-ncec.w.nv r eAabhsh vewlm 'he blooms mNdnoo w-tu'wmwn esu;' 
or sources m this law enforcement or intelligence activity. 
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!SMi ssNinnu>mmi emf om m 
FBI PTAt AisOJYCV Database 

.SSNs are necessary to Identify FBI personnel in this infernal administrative system. 

.SSNs are important Nr other reasons. Describe: 

I X NO' ' N X. , O*, w O e NN\s x x -n\v 0 > ' X.x 

hidden from ah users via a a look-up table, or only available to certain users) Describe:: 

.b is not feasible for the systerg project to provide special protection to SSNs. 

Explain: 

6: o ' >*' \|a w>i \i tr : ir ’ m isx , * ' I, wvi; '» x O „ o , 

irrtbrrnat.ioni 5 

NO [I f no. proceed to question ?. J 

a. Does the system/project, support criminal, CT. or PCI investigations or assessments'? 

.YES. |Ihyes. proceed to question 7.1 

.a.NO. 

b. Are so meets of mtormauoo .Norn whom the mformaoon is directly collected provided a veritten 

P( \ l X t feMv v O V vv t , 

x.NO. 11 he program will need to work with PCLIJ to deve Iop/implemen t the 

YES. Identify any forms, paper or electronic. used to request such 
information from the mfm'm&ihm subject:: 

stems undergone Certification & Accreditation (CA&Ai by the FBI Security Division (SecDf? 

NO. If no. indicate reason; if C&A is pending, provide anticipated completion date; 
This seill be a Microsoft Access system which has been approved by SecD, 

YES. If yes* provide date of last CAY A eertifieatiou/re-ceriiilcatioo: 

Dorft know. 


8. Is this syo cm/pro lest the subject of an OMBYvOO budget submission? 

x NO. Dorft know, YEN. If yes, please provide the date 

and name or idle of the OMB submission: 


Has the sy 
.x. 
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[UNCLASiiilFrEl)/OFFK;iALI.:SEONLY] 
FBI FT A: AxCLD-CV Database 


9. h this a national security system (as determined by the Set. D >? 

s. NO. YES, Don't know. 


i 0. States of System-' Protect: 

.....,,,,x....... This is a new system/ prelect in,#vdopmeni, flf ym checked lids block, STOP. 

The PI'A is »w complete ami after division approvals} should be sobnbffod 
to FBI OOC/PCLi; for final FBI approval and deterrsrbmtfon if PI A and/or 
other actions are required ,| 


11. EXISTING SYSTEMS / PROTECTS 


'A V ' " vW l v - \ CO p < „Ct dw e'opcd ‘ 


2 . Has the systern/projeef uudergone any Sign:-leant changes since April 17 : . 2003 ? 

NO, (If no. proceed to nest question (11.3).] 

N x . , < -> 'M u * 'h s' iv ^ v . •> > ore ! w . m is k all ho\» \'h»n 

apply:: 

A conversion from paper-based records to an electronic system. 


A change Coot information in a format that is anonymous or nomkfomlfiabfo to a 
format Cat i- -demidufoo m pars nail ir iodix foauA.' 

\ueouoof ci wopsoee? ov'ojna a;q :c eg.es ot .'A' Tsoy a. 

chances how information 1st identifiable fords is managed. fFor example, a change 
x t foetid ciee.c a rm w o vr ri . - wo ev ' < r eoeKie I x e\|-v\,.w u * t\< mm 
previously did not exist) 

A change that fox w minmufso t '- m mo.fof’eb.e forr- home owg* J. .mmralfocb. 
or matched with other databases. 

A -sew method of au therm cam's g the use of and access to information in i den till able 
form by members of the public? 

A v-ctCvireo' 'i.m ,ahfo o > c *i« s * w»n 
purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in new uses or 
exchanges of information in Identifiable form 

A change that results in a new use or disclosure of information m identifiable form. 

A change that results in new-' Items o fin format-or: In identifiable form being added 
mto the"system/'project. 

y I cocn \' ou ' \e v ai _e ' .i :i\ ot vor.v him n . o \ 

on whom records are maintained, or the use or dissemination of information from 
the system/project. 
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IUMN .^SSIFIElVOFFiei AL USE ONLYj 
FBI PI'A: SSCUNCV Database 

Other. jPrm icle Brief ixxpkaasionjj 

3, Does a FIA ibr this sysfero/proiect already exist? . NO. YES. If yes; 

a. Provide dsLe/iitle of the PI A; 

b. Has the system/project undergone any significant changes since the PI A? NO. 

[The FT A is nenv complete end alter division approval (so should he submit tied to FBI 06C PCLU 
S' IN s 'v.*e ' ten I’i \ O oi etas. v - v 


YES. 
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WMt OPS\Mi Mb 


Tffiaey Threstmkf Analysis (FI'A) Cover Sheet 

b7E 


SYSTEM POC 

FBI OMC-TO 1 POC 

s 'e v h \| " . | 

Hamm AOC| I 

Proyr&m Office; CryptOogic H 
Electronic Analysis Cnd (CLAU; 

Di. v 1 $?. on; 0 pored on ai Tech nolo gy 
Division fOTD) 

wq«--| i 

Room Somboo )AP4A : . JbkE-h 

Phone; 1 1 

Room Number: 7338 JEB 


FBI DIVISION APPROVALS. 



Program Division; 

FBIBQ Division: OTP 

Program Manager 

Simoom 

Smoamve) 


on other appropriate 

Dele signed; 

Pare mmed §|;P 1 1 T 

301 

i sC.'Udsc ;0 Di'. noon 

Name; 

Name: S5/\| 

~n 

<. 0 m 

True; 

Tuie: IT; Chief. CBaL 

Dor non Privacy 

Signature: 

s A' > 0 Area. V T ' 

DC 

Officer 

Dare signed: 

Dare si gned: N Dpi# C «> 


Came: 

V \ > s 


True: 

'Due: Section Chief. Oil) 


PI n \ I t Hi \PPiCn o - 

oy plus clear 

» ii :copv m OCOT>CLU.XEitR 00m ?33S ) . 

1 FBI Privacy and Civil Li berries Officer 

Signature 

......, x ' _ .. . ^ 


Dam Srnned' 

1 . / ./•■•-" A r / : T''.O/ffi 0 

l 

Name; 

.Das.id C, LasDon """" 

l 

T-tle: 

Depay General Counsel 

Coon final FBI approval. FBI OGC nail dnmhure as iolloms: 

1 ■ Signed original m ffi0ffilQAN32np4 

Corses: 

1 - DOJ Privacy and CAT yberries Office 

2 - FBI OC.IO / OIPP 

1 - FBI. Serf) ieCriro-oc copy via e-mail) 

2“- FBD2Q Division POC /Privacy Officer 

I • OGCmCFU inrranei mebsue 
i • PCLU DC 

1 •• PCLU Library 
i • FCLL adder 

Cpiea.se reproduce as needed for Prog 

nm/Div-sion 1 

ilsiso 
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FBI PRIVACY THR ESHOLD A NALYSIS (PTA) 

NAME OP SYSTEM; ! | b7E 

5 - Mia..AjOiA.OM.wFl have access to the m formadon In the a vs te rn and control s for cttsurirn? 


Access io | ~| i$ limirMtoCEAU personnel who require access 10 the system to perform dies: 
N ° u > *' Nn | | C used to prepare analytic reports disseminated to YEP AC a nd 

other FBI components as .required.. Users -a. i;h need do--know acccssl | 

f * | is controlled by the user's 

network resources sc 


■supervisor, verso is rcsne csn'ie tor uetomunm; 
support of their tas king, | 
fonnmmmow -Vsi | l asers 


; ol twcess to 


ts performed by system 


documents prior to network acct 

6 . Who outsi de the E SI mm 


complete a security awareness briefing and sign acknowledgment 
CWWisltIsWjnjxn;;;:u;ncngnj : he eystent.and 00010:11,110, ensuring 


lire only information available to people outside the FBI is analytic mfotTotfoon in the form of 
teenmetu reports and similar products prepared by CHAU, The information is then disseminated, as 
warranted, to extenor entities who may benefit from the technical information being distributed. The 
information .shared doc s not include Personally Identifiable* Information, as no Pli is contained and/or 
col i ec t ed ; n | ] b i e 

7 Il‘AihfhAfoIdtA.bcen certified a nd accredited bv th e FBI Se curity Divisions? X Yes _No 

h Is tins svstem e ncom passed with in an OMBmOO? Yes _X... hfo ___ iVuiKo-m 


Was the system developed prior to April 17, 20(13? 

...X... YES (It Acs A proceed to Question lb 

.. NO Of ''cod' proceed to Section II.) 

; Has the system undergone any Agnitkan? changes swee Arm; f?l 200 3° 

' ' ' U " , , t < x 

(Continue to Question. 2.i 

..JwNO ^ (it Aw." the PTA is complete and should be sent to FBI QGCx Privacy and Civil Liberties 
turn A'CL lb for review, approval, and forwarding to DOTs Privacy and Civ.il Liberties Office, Unless 
you am otherwise advised, no PI.A is required.} 


Do the changes involve the coiks 
form ahem individuals? 


ion, maintenance, 


mnatlou of information in identifiable 


1 'yes;' please proceed to Question A ; 
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FBI PRIVACY THR ESHOLD A NALYSIS IPTA) 

NA ME OF SYSTEM; I I b7E 

.NO -if 'ArU' the FT A L complete nod should be sent to FBI OGCs Privsey and Civil Liberties 

Fob (PCLU) for n.o tew. approval, and forward; no to DOFs Privacy tmd Civil Liberties Office. Unless 
you vuc otherwise advised, no PIA is required.'; 

3. in me system soldy related to mtcmal govesssmenr texem; sons? 

.No. {it “no " bm FT A is complete sod should be sent to FBI OGCs Privacy 

nod Civil Liberties Crut IPCLO) lor review, approval, od forwarding to DOFs 

x v v V O'l v w ' v v^ 'v s'. 

required. (FBI and DOJ reviewing ofbeBis reserve the right to require a PiA t) 

.NO ; If 'em" go so section 01 to betermfoe If a Odl or shost-fortrt PIA k requited.} 


11.. For systems developed td'ter April FI, 2GB, 

1 What Is the purpose of the system? (Answer in detail unless details already provided ot A. 2 above;: 

2, Dries the system collect, m.unwln o disseminate htformatiors In idle ski liable form about individuals'} 
_YES -if “yea," please: proceed to Question N } 

.NO {:.( “no? the FT A Is complete and should be sent to FBI OGCs Privacy and Civil Liberties 

list it (PO...C) Far review, approval, tmd forsvasUmg to DOFs Privacy and Coh Liberties Office. 
Unless you are otherwise advised, no PIA is required.) 


.Yes. (If :: yes?" si full PIA is required., FT A is complete.} 

.,,, No. sir Atoy" the FT A. la complete and should be sent to FBI OGCs Prousts 

and Civil liberties Cttlt (PCLUi tor review, approval, and forwafolng to 00.0 
Privacy and. Civil Liberties Office, Unless you are otherwise advisee, sm FIA is. 
reqmsod. yFBI and DCs.I reviewing offowus reserve the right to require a FIA }} 

.NO Of "no?" go to section 111 to determine if a foil or short dorm PIA la required.,; 
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FBI PRIVACY THR ESHOLD ANALYSIS iVTA> 

NAME OF SYSTEM; | | b7E 

IIL Foil or Shon-Form PIS 

B s s' s' > > s ' s'; > * ' s f'K < S ' Hjf V' 'S 

VEsS ; If "yes."s foil PiA b required. FT A A eo;rq>kee.) 

.YES A shorr-form PIA A required. fie . you need only answer Questions 1.1. 1,2, 2.L 3,L 

4. I. 5.1 V smtroprnnel y 2. 6.3. end 6.6 sf the PIA teoipVe.) PDnse note that FBI and 
DO.? revieudue offkieis reserve the ngfu u; require completion of e full PiA. (FIA k 

s ' A'.' * ' - s". v r p '< 

.AO Of "no " a fob PIA A required. PT.A is sonquete } 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev.07/06/07) 


NAME OF SYSTEM: Criminal Law Enforcement Application 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: 

1 1 

Name: j ] 

Program Office: 

ITB 

1 1 - 1 

Division: 

ITOD 

PhoneJ ! 

Phone: 

1 1 

Room Number:7338 

Room Number: 

8979 


DaLe PTA submiLLed for approval: 04/29/2008 



FBI DIVISION APPROVALS. A PIA (and/or PTA) should be prepared/approved by the cognisant program management in 
collaboration with :T security, and end-user management and PC ! U (PIAs/PTAs 1 elating n electronic forrns/questionnaires implicating 
tite Paperwork Reduction Act should also be coordinated with the RMD f orms Desk.) if the subject of a PTA/PIA is unde; the program cognizance 
of an FBiHQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the FBIHC/Division for program review and approval, if 
required by the EBIHQ_E3ivision. 



Program Division: CID 

FBIHQDivision:ITOD 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 04/29/2008 

executive as Division 

Name: 

Name: | j 

determines) 

Title: 

Title: IT Specialist 

Division Privacy Officer 

Signature: 

Signature: /s/ 


Date signed: 

Date signed: 5/6/2008 


Name: 

NameJ j 


Title: 

Title: Division Privacy Officer 


Upon Division approval,forward signed hard copy plus electronic copy to QGC/PQ.U (IEH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 

N 


Date Signed: 

6/26/2008 


Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI approval, FBI OGC will distribute as follows 

1 - Signed original to 190-HQ:C1321794 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 
2-FBI OCIO/OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Criminal Law Enforcement Application 


(OGC/PCLU (Rev. 07/06/07) 


For efficient:)/, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) 
is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

The Criminal Law Enforcement Application (CLEA) is a computer application designed to assist the field in the 
management of and access to the voluminous intelligence data derived from criminal investigations. 

1. Type of information in the system: 

Intelligence data derived from criminal investigations. 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/contractor information: 

2. Purpose for collecting the information and howitwill be used: 

Criminal Investigations. 

3. The system's structure (including components/subsystems): 

Database Management System [ADABAS/Natural] 

4. Means of accessing the system and transmitting information to and from the system: 

FBI Investigative Mainframe 

5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

Only customers that have access to FBINET may have access to CLEA. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

Only customers that have access to FBINET may have access to CLEA. 

7. Has this system been certified and accredited by the FBI Security Divisions? X Y es _No 

8 Is this system encompassed within an OMB-300? X Yes _No _Don't Know 

(If yes, please attach copy of latest one. SORRY. I do not have a copy of the latest one 5 


I. Was the system developed prior to April 17,2003? 

X YES (If "yes," proceed to Question 1.) 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Criminal Law Enforcement Application 


(OGC/PCLU (Rev. 07/06/07) 


_ NO (If "no," proceed to Section II.) 

1._Has the system undergone any significant changes since April 17,2003? 
_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

X NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwardingto DOJ’s Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If “yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If'yes/'afullPIAis required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


For systems developed after April 17,2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: Criminal Law Enforcement Application 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIAis required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIAis required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise 
advised, no PIAis required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIAis required.) 

III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES A short-form PIAis required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1, 5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTAis 
complete—forward with PIA) 

_NO (lf"no,"afull PIAis required. PTA is complete.) 
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FBI PRIVACY THEE; 


analysis c;r 


NAME OF SYSTEM / FROJEl T; 


BIKR FBI AsxM ID;. 


| iMroed Wmt 
\ Ck-S'MBed By 


M s | EM FBOMV r OPf 


EO M v \PF RJ'S._\ S ^ ^ > 3 ' et < v.< ^ *3 t \M h P ; >» > s ' eap^ 

? P;og;-s;3> Mmsaai da oker appionnAe i DivAloe Briv^y Officer 


Afkr Ml Ohisieo ap|W?vab> Ora 


s.ml hnrti easy $gft$ elect* 


l |»k*3s Mod FBI sppnn A ) M < hH K | 1' 


Copies (recipients 
CDOJ Office of 
r'eVstf , 

2- FBI OCIO O: 
1 • FBI SecD/AU 
1 -EMM EM', . 


needed for PropreevDsv-oron nMys): 
e> (vie coned to prooiey (yuMoi yov, 
i Perm. Ave, NW, Suia 940. 20530) 
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1. Prwkk & general skseripifmt of rise system or project iinu Includes; to) name o! 
the system/projeer, hwiodmg associated aeroxwnuo (t>) smsemre of the 
sysiem/projed, kwlmihvg interconnections with other projects or systems? Ky 
pos p^e -f the lt utfR! project; oh nature of the inhn motion m the yxK.ii protect 
and how 0 olfl he used: to) who will have access to the Inform atom .ht the 
smlcm psopeu «fs and the tnuumw of mmwrnewh'n to ;df ewm 

B ACKG R Oil N .0 

11m Criminal Justice lokmnadon Services ;CJIS) Division of the Federal Bureau 
of investigation (FED lots undertaken a prelect to modernize modi of the technologies! 
mints trueture that allows suae and federal law enforcement agencies to egg rents te end 
shore enroots; justice ioiorrnntloo, .Although fingerprint matching remains the only 
method of positiv e Idemihoadu ry the law enforcement community eoudunes to rely 
heavily on CITS a ] 1 tech no logy lor near-Im mediate responses' This FT A 

' S V V \ I 

I T ens manages the ib I lowing databases that may he queried hy name anti other 

biographic in ham tad on; the Interstate I dnmiii cation indent fitly the National instant 



IfVnOYI \Sn|I IN v UO\ c NM INB M\KK!MN 
IF AI s PNO f R lA' nI:| 
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sure direct knowledge of. employee responsibility tor the security el Pih 
e is required to sign the t ; D-A 6 S Non-Disclosure Agreement for Joint. Ta 
my Con? room. Dele:; lees. Asbgneeo and tar eon. The contractor c;h not 
tin, or share oath anarthorded Individuata or entities fBBprovided 
onta.ioi.ng Pit. The contractor' oil! docarneut the processes and proeedan 
aoiact and preclude unauthorized dissemination ofPB end privacy 
ndor its control.. The contractor has been made aware of the DOJ protoe- 
roterntai and actual Pit broaches cod will abide by that policy. The 
I be responsible for performing recurring aadhs to ensure, strict complies' 
note tutor req-.uremwsts. 'The FBI Contracting Officer's Technical 
a (COT'Rl vbil er-sure corimcmt compliance with contract terms related 
ah}, the FBI will provide h'tibmtadon Security mambtg, which mdades 
etton, annually to ah addled contract employees. The FBi will ensure 


ecteo to result ns art improve 
or partners to receive combs 


11ASENT CLASS!FrCATIONVCONTl 
IT APPHOPElATId 
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.NO Ilf no, STOP* The FTA is mm complete and after division approvalD) 

\ so O * i t n ^ ! <1 w f / d >sl >r ul ^ o\^ o > 

oshertvbe advised, «c* PIA h requiredd 

.X YES [if yese §siease c.<mi«me.| 

3. Please hobcaie if ary of the fiabow.nsg cUtsoaebsosa apply m the hstotmafioss so she 
system about individual:*: Beat us .mind that log-on information to ay identify or be 
linkable to ass issdsvidnal 
tChock ah that apply.; 

.X The information dhoetty Denudes apod tic individuals. 

The it:bust::don js iol ended to be used, in coonnscidn with ottsor data clemently 
to indirectly Identify specific individuals. 

.x. The information can be ttaed to distinguish or trace ass irsbmdasd's identity (be.. is. 

is faked or linkable to specific, individual!?). 

If you marked any of the above, proceed in Question 4, 

■None of the above, if none of the above, describe why the irsibrosatiors docs out 
identify specific individuals cither dneedy or indirectly. (If you cheeked this des.su 
STOP here after providing the reqnested description.! 


4. Does tise syatens/proieei pert suss only to government esordoyeos. contractors. or 
.... X.NO .YES 


X is nbbttoaosss abotsi United States citizens or ksssfady adtstttted permanent resident 
chons tense wo from the eystessa/psoieci by ntsnse or other persona! idess.fifret? 

.NO. p.f mh skip io tjaefritm T«| 

...X.Yi: S, (if yes, proceed ta the next sows bon. j 

o. I )oes tise sy stenopsxnec' collect. assy bslonnahcm directly hosts the person who ;« the 
sssfs; cot of the f nfososahors? 

X NO (If no., proceed to question ?,f 

,\v Oil UiON^ONOfitf 

IF APPROPRIATE] 
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| If yes proceed to rpioOkui 



O ? ** o i ' ^ I I o o< * < o d O 1 I »» o J< ) 4'Ki , 
the oeeessary fomitYhl 

.YES Mmtkfy my fisrro, paper or eleemmk, nsed jo rerfoest such 

Moraa&a from the mformotioo subject: 

7, Are Social Secomy 'Numbers tSSNs) collected, ma.meoned or ohoomooeY iroro th 

n >. i\< m , "Vw O v t ' 'o v., f Y > 1 vLo . r. 

X NO '' . v II U'%. *h*A ad tfut appb 



" - \ X v.s' V v- 

encrypsed, hidden irona oh users via o look-up table. or-only available m cenalu 
. -e.' beM'Hhe: 

.E o. not feasible lor the stoLenvprqleci to provide special protecoon to 

S\\s Fxpbbro 



H \ 1 4100 s 
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X Yes. htfornaokm systems operated by contractors for the FBI may be 
consfoemo Pnvacy Acs. systems of records. The Federal Acquisition Regulation 
coma.ms stacsford contract clauses thar mum be included in the event the system 
collects, maintains or dssscrtnntues PH and additional reqtntcmems may be 
supposed as a matter of Department of Justice policy Consultation* with the 
Office of the General Counsel may be required if a contractor is operating the 
.system for the FBI. 

Mas the system undergone Certification & Accreditation (CkA) by the FBI 
Security Division • SecD)? 

NO If no, indicate reason; if CAR A is pending,, provide anticipated 
completion date; 

.X Y £$ If yes, please indicate the following, if known:: 

Provide date of last CStA certifieution/re-ccrtl.hcation: 07/ltBCO 

Confidentiality c.Low_X_Moderate _High_Cod dined 

Integrity: .Cow X Yloderate.High.Undefined 

Avoil.aihli.ty; X Low_Moderate ^Bigh _Undefined 


ilXSFRTs t U 0\t>A S 1 M vtkiV m 

IF .4PPM.OFRI.ATEi 
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X YES If yes, pkose provide the date and name or 

Pile M the OMP mdunXdmr A\N N ~ ' IXao 1 M n.. 

Crime Information Center NOC 

I1 Dora the system conduct data mitring as defined in See don 8X4 of the 

Implementing Recommendations of the 9/11 Commission Act of 2(?0?. Pi... 1 10- 
53? 

_X v .NO 

YES if yes, please describe the date mining fuisetkmt 
12. Is this a notional security system (as determined by the SecDY;' 

X NO .YES 


13, States of System? Project; 

X This is a new project in dm Top:oner pf you checked this bind? STOP, 
The ETA is mm complete sod after division appro valid shook! bo submitted 
to FBI OGC/EGXJ for final FBI approval and determination if ITS and/or 
other actions are res|tdmij 

if. EXISTING SYSTEMS / PROJECTS 


YES x n s w s ' n a s oil 

hoses that apply): 

A change Com hbbrmabon in a .format that is anonymous or non- 
foenphabfo to- a format that is identi Sable to particular Individ tubs. 

A now use of an IT sysfom/pmaeco ineluding nppboahoo of a new 
technology, that changes bow information in tdemifomfo form is managed. 


liXSERT CL ASSfFlCATIOX/CONl'ROL MARKINGS, 
11 UNISEX! mu! 
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(For example. a change that would create a .more open eswiroarnent and/or 
avenue for exposore of dam huts previously did not exist.) 

A change that results ha upon oof on ha idemiflabk form being 
merged, central ked, or matched wish other databases, 

A new method of suttsendcating hie use of end access to 
information in identifiable hunt by members of the pa bike 

A systematic Incorporation of databases cHu formation in 
Identifiable form purchased or obtained bona commercial or public sources. 

A new Interagency use or shared agency limetlon dun results tn 
new uses or exchanges of Infornuuion in ideotdlable form, 

A change that results Its a new use or disclosure of information in 

'' v * w’ i ^ > w v o' „ ,r m' *o 

Changes do not involve a change to the type of records maintained, 
the Individuals on whom records arc maintained, or the use or 
dissemination of information hern the system/pteieet. 

Other fProvide brief explanation};: 

.NO .YES 


If yes: 

a. Provide daie/tlfk of the PI A; 

b. Has the systenu project undergone any significant changes since the PLY? 

.NO .YES 


i Ow El ' w w w >.mspnae and alta damson approvedA Com hi be submitted to 
OH Ot t Alt, t.u.n'Oib ^ pun ikoJivtumi -sat' '? I'CmbfOK^ 
actions are mparetij 


i\.m Ki <! xNinruim <uMmn \urki\aw 
I'F APPROPRIATE) 
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WMi Ot Q 


XX HO i ;f ArtO'tbe F t A Is aosrtplete are 
Liberties V.Jis-i: {FCLO} Co review, approval smd S d ward It 
s arc otherwise edv;sed, r:o PI A Is racer 


o treat, easonaosoec. or dssseroo: 


EC Privacy and Civil 
v assd Civil LI bas'd as 


.Do -ha abettas-s iwohe The e 
Don about I sad AIdnatsd 


YES 


" pi Cause pS'OCaed TO Ch.WStiou 3.) 


.NO (If "ratC the PI A ;s complete cod shoe id Pa sent 

Cod iPCUJl ior review, approval, end iorsvardme. as DOFs r 
you arc otherwise ad vised no PIA Is required.) 






;d sot OGCA 


.No Cf AtoC the PTA Is compDre and shordd ho soot to FBI OGCY Privacy cod 

Civil .Liberties UoiuPClU) Dr review, approved .md iorvotPirtg to DDLs Privacy 
arid Civil Liberties Office. Unless you are otherwise advised. oo Pi A C required, 
trIds it.s'd i.)O.I reviesvlna otTieBB reserve the right to require ts PlA.t; 


L Far systems developed after April FT, 2 (MB. 

iCorrsimte to Cosestkot 2 ) 

2. Boas the sy.storo eollaet, rnnlw.aiu or a:ioscrrslrotto ioforrosGor: It's Ideet; Labia Soros atxssd isTdlvidte 
.YES Ct -'yess' please proceed to Question d.) 

ID-It - PCI,Id thr review, approved end torwardsna to DGJy Faiveay aod Civil Liberties Office, 
Eh-less yoe eta ofhero Ye advised. tto Id A sa required.t 


...YEA irBaoC Is this 


i o ter r; ;t i gov a re men-: o jsetadi 
egsot loiawisarasn V> stern o 


on OGCY PBIKET website}?. 
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(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESH OLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM/PROJECT: | | b7E 


Dr: rived Ftorot 

SYSTEM/PROJECT POC 

FBI 

OGC/PCLU POC 

Classified By; 

Namej j 

Name 

1 

Reason; 

Program Office: RCFL NPO 

Phone 

1 

Declassify On: 

Division: OTD 

Phone:| 1 

Room Number: 3A97-A 


Number: 7458 


FBI DIVISION INTERMEDIATE APPROVALS [complete as necessary consonant with Division policy; 



Program Manager (or other appropriate executive as 

Division Privacy Officer 


Division determines) 

1 1 

Program Division: Operational 

Signature:/s 

Signature: 

Tethnology Division 

Date signed: 9/30/2009 

Date signed: 


Namej - ~l 

Name: 


Title: UC RCFL NPO 

Title: 

FBIHQ. Division: 

Signature: 

Signature: 

[insert division name] 

Date signed: 

Date signed: 


Name: 

Name: 


Title: 

Title: 


After all division approvals, forward signed hard copy pins electronic, copy to FBI OGC/PCLU ({EH 7338), 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the following page.) 

Upon final FBI approval, FBI OGC/PC.IJj will distribute as follows: 


1 - Signed origi nal to file 190-HQ.-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacy(£>usdoj.gov) 

(if classified, via hand delivery to 1331 Penn.Ave. NW, Suite 940,20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn | | 

1 - FBI SecD/AU (electronic copy: via e-mail to UC | ~| 

1 - RMD/RMAU (attn: l I 

2 - Program Division POC/Privacy Officer 
2 - FBIHQDivision POC/Privacy Officer 


1 -OGC\PCLU intranet 
1 -PCLU UC 
1 -PCLU Library 
1-PCLU Tickler b6 

b7C 
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I will be competed by the FB! PCLU/PCLO fc 


INAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section 
1A drafter should skip to the next page and continue.] 

_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 

_x_ PIA is not required for the following reason(s): 

_x_ System does not collect, maintain, or disseminate Pll. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No _Yes (see sample EC on PCLU intranet website). 

SORN/SORN revision(s) required? _No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. The system may contain Federal 
records whether or not it contains Privacy Act requests and, in any event, a records schedule approved by the National Archives and Records Administration 
is necessary. RMD can provide advice on this as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary 

Other: 
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David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: /s 

Date Signed:9/29/2009 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, including associated 
acronyms; structure of the system/project, purpose; nature of the information in the system and how it will be used; who will have 
access to the information in the system and the manner of transmission to all users. (This kind of information may be available in 

the System Security Plan, if available, or from a Concept of Operations document, and can be cut and pasted here.): 


b7E 
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FBI PTA: 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is information 
linked to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 

_X_NO. | | vhich may or may not involve Pll. Any 

analytical product relevant to an ongoing investigation becomes part of the relevant investigative casefile and systemically 
handled in accordance with established data processes and protocols for investigative case data. | | 


jif no, ST OP. The PTA is now complete and after division approvai(s) should be submitted to FBI QGC/PCLU forfinai FBI 

approval. Unless von are otherwise advised, no PiA is required.] 

_YES. [Ifyes, please continue.] 

3. Does the system/project pertain only to government employees, contractors, or consultants? 

_NO. _YES. 

4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by 
name or other personal identifier? 

_NO. _YES. 

5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 

_NO. _YES. If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 

_SSNs are necessaiy to identify FBI personnel in this internal administrative system. 

_SSNs are importantfor other reasons. Describe: During the examination digital mediaseized underlegal 

authority, SSNs of victims and accomplices would provide scope of the investigation and assist in the identification of those involved. 

_The system/project provides special protection to SSNs (e.g.,SSNs are enciypted, hidden from all users via a a 

look-up table, or only available to certain users). Describe: 

_It is not feasible for the system/project to provide special protection to SSNs. Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the information? 

_NO. [If no, proceed to question 7.] 

_YES, but only to the extent any of the media collected provides information about the author of that media. 
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FBI PTA: 


b7E 


a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

_YES. [If yes, proceed to question 7.] 

_NO. 

b. Are subjects of information from whom the information is directly collected provided a written Privacy Act (e)(3) 
statement (either on the collection form or via a separate notice)? 

_NO. [The program will need to work with PCLU to develop/implement the necessary form(s).] 

_YES. Identify any forms, paper or electronic, used to requestsuch 

information from the information subject: 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_ NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: October 6,2009. 

_YES. If yes, provide date of last C&A certification/re-certification: 

_Don't Know. 

8. Is this system/project the subject of an OMB-300 budget submission? 

_NO. _Don't know. _YES. Ifyes, please provide the date and name or 

title of the OMB submission: 

9. Is this a national security system (as determined by the SecD)? 

_NO. _YES. _Don't know. 

10. Status of System/ Project: 

_ This is a new system/project in development. [If you checked this block, STOP. The PTA is now complete 

and after division approval(s) should be submitted to F8i OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required .] 

11. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 
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FBI PTA: 


] b7E 


NO. [If no, proceed to next question (11.3).] 


_ YES. lfyes,indicatewhichofthefollowingchangeswereinvolved (mark all boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a format that is identifiable to 

particular individuals. 

_ A new use of an IT system/project, including application of a new technology, that changes how information 

in identifiable form is managed. (For example, a change that would create a more open environment 
and/or avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being merged, centralized, or matched with other 

databases. 

_ A new method of authenticating the use of and access to information in identifiable form by members of the 

_ A systematic incorporation of databases of information in identifiable form purchased or obtained from 

commercial or public sources. 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiable form. 

_ A change that results in a new use or disclosure of information in identifiable form. 

_ A change that results in new items of information in identifiable form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, the individuals on whom records are 

maintained, or the use or dissemination of information from the system/project. 

_ Other. [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? _NO._YES. If yes: 


a. Provide date/title of the PIA: 


b. Has the system/project undergone any significant changes since the PIA? _NO. _YES. 

[The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for final FBI approval and 
determination if PIA and/or other actions are required ,] 
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